Is True Captcha safe?

Low risk

True Captcha sends captcha images, page URLs, user agents, selector metadata, and saved API credentials to TrueCaptcha.

When solving a captcha, True Captcha collects the captcha image or image URL along with the current page URL, browser user agent, selector metadata, extension version, and solving options. If the user has saved TrueCaptcha credentials, it includes those credentials in the JSON request sent to the TrueCaptcha API.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

truecaptchaorgv0.3.8Chrome Web Store
15Risk
Who publishes it

truecaptchaorg - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
truecaptchaorg

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.3.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on api.apitruecaptcha.org

    https://api.apitruecaptcha.org/*

  • Read and change your data on api.truecaptcha.org

    https://api.truecaptcha.org/*

  • Read and change your data on localhost:3000

    http://localhost:3000/*

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

Where it sends data

Destinations our analysis observed True Captcha contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.apitruecaptcha.org

    True Captcha sends data to api.apitruecaptcha.org. No other extension we have analysed sends data here.

Updated 30 September 2026cpmfphibjofbcckoemdobkngmghblbmd